Verichains

The $PORT3 Exploit: How a Missing ecrecover Zero-Check Cost Millions

Port3 Network (PORT3) Security Incident Analysis

Dec 15 • th13vn

1

Yearn Finance and the 16-Wei Deposit That Drained $9 Million

A technical breakdown of how 16 wei became 235 septillion tokens—and the dangers of cached state in DeFi.

Dec 8 • HL

1

November 2025

WXC Exploit Analysis

On August 11, 2025, a critical vulnerability was exploited in the WXC token contracts, resulting in an estimated loss of approximately 37.5 BNB. The…

Nov 28 • TK

The DRLVaultV3 Exploit: A Slippage Design Failure

On Nov 10, 2025, DRLVaultV3, a USDC–WETH rebalance vault, was exploited due to a design flaw.

Nov 25 • lifebow

1

TokenHolder Hack Analysis

On October 7, 2025, the TokenHolder project fell victim to an attack that resulted in the loss of 20 WBNB - approximately $25,000.

Nov 22 • LCD

1

1

Balancer Exploit - Small Rounding Errors Lead to Big Losses

Overview

Nov 17 • nt

1

Lack of Access Control to Incidents

On October 29, 2025, an unknown project was exploited through a vulnerability on the custom logic, resulting in the loss of approximately $218,000.

Nov 14 • f4tu

1

October 2025

Vulnerability Analysis: Deconstructing the $147k Sharwa Finance Exploit

On approximately October 20, 2025, Sharwa Finance, a protocol on Arbitrum, was exploited, resulting in a loss of ~$147,000 from its WETH, and WBTC…

Oct 30 • th13vn

1

Cozy Protocol Incident

On August 29, 2025, Cozy Finance was exploited through a vulnerability on the OP Mainnet Network, resulting in the loss of approximately $427,000.

Oct 15 • f4tu

1

BunniXYZ Vulnerability Exposed: How Precision Bugs Drained Millions

BunniXYZ Exploit Analysis

Oct 14 • HL

1

Abracadabra Money Hack Analysis

Abracadabra Money is a decentralized finance (DeFi) lending platform that lets users leverage their interest-earning crypto assets by using them as…

Oct 6 • LCD

September 2025

Deep Dive into the GAIN Project Incident

On September 25, 2025—just a day after its Binance Alpha launch—GAIN was exploited via its Binance Smart Chain (BSC) deployment.

Sep 29 • lifebow